This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/y-uuMFXf-Scx2MN6BDbVIftk3xk.roa File: y-uuMFXf-Scx2MN6BDbVIftk3xk.roa (raw, json) Hash identifier: yfvMu66uv7Lal8MVr9Vgy1IUkLDBtyoLNZxuu1dTKPI= Subject key identifier: CB:EB:AE:30:55:DF:F9:27:31:D8:C3:7A:04:36:D5:21:FB:64:DF:19 Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d Certificate serial: 019B797EAC7307242470BCEEEE41EA02C182 Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/y-uuMFXf-Scx2MN6BDbVIftk3xk.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42011 IP address blocks: 185.209.116.0/22 maxlen: 22 2a0b:4540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ac:73:07:24:24:70:bc:ee:ee:41:ea:02:c1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbebae3055dff92731d8c37a0436d521fb64df19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:87:12:38:62:db:b6:a7:50:b5:a5:df:f3:e0: 7d:7d:af:97:ac:df:eb:68:b1:74:f7:a3:14:fd:8c: 65:ed:7e:7a:05:aa:f4:39:03:d4:c1:4a:7b:eb:a3: 4b:59:0c:be:98:f0:41:f3:f4:29:21:3f:be:12:6c: 2a:3e:6c:97:c1:fb:eb:7e:38:47:57:0f:e8:ea:83: 49:67:e0:5e:f3:9c:5a:d3:49:85:d7:aa:02:38:34: 6a:0d:e5:2d:43:50:ce:9a:04:fb:49:ec:bc:91:56: 0d:0c:69:d8:20:44:23:59:81:99:d3:b4:34:3c:e6: bd:c2:e3:1a:10:f3:94:5f:a0:fd:70:15:da:34:90: 14:78:f8:31:14:8f:d8:a8:51:ec:78:14:32:ac:64: 52:4b:c1:77:fa:cf:22:45:6f:89:df:a6:b7:f9:ea: 32:c5:5d:ef:01:b9:8a:60:cd:3d:3c:70:bd:66:20: bb:70:67:8f:2a:eb:ec:79:4d:29:f7:d0:f9:72:30: 9b:8c:ad:f3:a7:42:3a:ba:e3:2c:6a:5d:80:be:5a: b0:3c:cd:ab:a1:21:a8:29:31:a9:61:98:44:b9:87: 37:0d:8d:af:57:07:04:18:c2:f1:75:ee:d0:7a:d6: f8:8d:01:68:4e:3b:15:4c:12:6d:0c:33:cc:92:17: d9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EB:AE:30:55:DF:F9:27:31:D8:C3:7A:04:36:D5:21:FB:64:DF:19 X509v3 Authority Key Identifier: keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/y-uuMFXf-Scx2MN6BDbVIftk3xk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.116.0/22 IPv6: 2a0b:4540::/29 Signature Algorithm: sha256WithRSAEncryption 47:97:a1:82:06:21:07:c9:b0:83:c7:1f:26:a5:9e:03:c0:82: 87:e9:13:0e:8e:cd:36:c1:64:e2:55:04:07:12:e4:ee:a0:4a: 3d:4b:89:51:82:96:9e:72:2d:46:e7:70:21:59:d4:0c:53:fc: cd:1a:30:60:29:a7:41:d6:b1:27:ef:23:be:95:44:56:0b:48: 3d:a2:41:eb:4c:c2:2d:20:1d:9c:65:ed:10:b2:7a:c7:21:78: c6:ba:ca:58:90:d3:b2:db:63:fc:99:eb:f4:a1:1e:bf:88:c8: 33:49:6c:f1:03:03:da:86:ea:da:3d:f7:1d:14:b0:6c:e4:fe: ab:9f:28:89:1e:72:f6:95:8f:7a:e9:3d:79:6e:91:0f:0f:d5: 45:4f:a7:43:b0:02:bb:d2:32:24:95:76:7e:a1:87:2a:16:70: eb:05:6f:6a:6f:ab:c6:92:ae:c2:1f:42:7e:7d:28:49:42:5c: b0:95:18:ed:33:fb:6a:75:72:45:15:35:84:a3:40:ca:55:64: 72:a7:b9:39:df:67:db:1a:4e:c7:57:1d:42:e8:ca:36:b0:25: 27:0f:9e:93:07:15:f9:09:8c:1c:ac:ea:2f:ec:9f:c1:a3:b6: ea:e5:93:0b:e0:7b:a9:58:e4:25:05:2f:fb:bc:ae:31:3e:3a: 04:30:d4:9d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fqxzByQkcLzu7kHqAsGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZDk0MzZkMjEzNWMwODQ4OTdiNzRjNmFkMzZkYTE3MDBh N2E5OGQwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmViYWUzMDU1ZGZmOTI3MzFkOGMzN2EwNDM2ZDUyMWZiNjRkZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqocSOGLbtqdQtaXf8+B9fa+XrN/r aLF096MU/Yxl7X56Bar0OQPUwUp766NLWQy+mPBB8/QpIT++EmwqPmyXwfvrfjhH Vw/o6oNJZ+Be85xa00mF16oCODRqDeUtQ1DOmgT7Sey8kVYNDGnYIEQjWYGZ07Q0 POa9wuMaEPOUX6D9cBXaNJAUePgxFI/YqFHseBQyrGRSS8F3+s8iRW+J36a3+eoy xV3vAbmKYM09PHC9ZiC7cGePKuvseU0p99D5cjCbjK3zp0I6uuMsal2AvlqwPM2r oSGoKTGpYZhEuYc3DY2vVwcEGMLxde7Qetb4jQFoTjsVTBJtDDPMkhfZ2wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMvrrjBV3/knMdjDegQ21SH7ZN8ZMB8GA1UdIwQY MBaAFDvZQ20hNcCEiXt0xq022hcAp6mNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzlsRGJTRTF3SVNKZTNUR3JUYmFGd0NucVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jNTNjM2UtYWEyZC00MWFiLWEzMTIt MjYzN2QxMzMzOGYxLzEveS11dU1GWGYtU2N4Mk1ONkJEYlZJZnRrM3hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jNTNjM2UtYWEyZC00MWFiLWEzMTItMjYzN2QxMzMzOGYx LzEvTzlsRGJTRTF3SVNKZTNUR3JUYmFGd0NucVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudF0MA0E AgACMAcDBQMqC0VAMA0GCSqGSIb3DQEBCwUAA4IBAQBHl6GCBiEHybCDxx8mpZ4D wIKH6RMOjs02wWTiVQQHEuTuoEo9S4lRgpaeci1G53AhWdQMU/zNGjBgKadB1rEn 7yO+lURWC0g9okHrTMItIB2cZe0QsnrHIXjGuspYkNOy22P8mev0oR6/iMgzSWzx AwPahuraPfcdFLBs5P6rnyiJHnL2lY966T15bpEPD9VFT6dDsAK70jIklXZ+oYcq FnDrBW9qb6vGkq7CH0J+fShJQlywlRjtM/tqdXJFFTWEo0DKVWRyp7k532fbGk7H Vx1C6Mo2sCUnD56TBxX5CYwcrOov7J/Bo7bq5ZML4HupWOQlBS/7vK4xPjoEMNSd -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:32 2026 by rpki-client